Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/2X1QTr4pK6dsEEDP0TzEN8x0Xjs.roa
File: 2X1QTr4pK6dsEEDP0TzEN8x0Xjs.roa (raw, json)
Hash identifier: gCJDq0GkaAMrO8N1qqBRsBVELfUsKIVwgsPJV3Su75k=
Subject key identifier: D9:7D:50:4E:BE:29:2B:A7:6C:10:40:CF:D1:3C:C4:37:CC:74:5E:3B
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 0194206858B219F9EF153671DA1C9BED0356
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/2X1QTr4pK6dsEEDP0TzEN8x0Xjs.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41535
IP address blocks: 62.213.86.0/24 maxlen: 24
77.221.130.0/24 maxlen: 24
89.253.192.0/21 maxlen: 21
89.253.200.0/21 maxlen: 21
89.253.202.0/24 maxlen: 24
89.253.203.0/24 maxlen: 24
89.253.208.0/21 maxlen: 21
89.253.216.0/21 maxlen: 21
89.253.224.0/21 maxlen: 21
89.253.232.0/21 maxlen: 21
89.253.240.0/21 maxlen: 21
89.253.248.0/21 maxlen: 21
109.120.162.0/24 maxlen: 24
109.120.167.0/24 maxlen: 24
109.120.172.0/24 maxlen: 24
193.32.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:b2:19:f9:ef:15:36:71:da:1c:9b:ed:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97d504ebe292ba76c1040cfd13cc437cc745e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:77:57:5d:52:ac:2b:c9:b2:c9:1a:47:57:
40:7d:c0:b5:d5:b6:23:63:7a:c9:9a:5d:13:65:d2:
b3:1a:94:f4:50:9f:6a:0b:f5:36:06:17:50:f0:d3:
fd:64:0d:b6:e4:b3:0f:e4:6d:90:35:41:fc:fd:7a:
67:3e:62:e2:7e:2d:eb:96:ec:27:a3:e7:1b:bf:17:
d6:58:95:54:4c:5a:79:f7:24:12:54:ff:d7:6e:ed:
36:92:fd:9f:cd:43:16:9e:e9:05:a4:65:4e:d3:cd:
9e:70:b2:6f:35:7b:6e:65:56:8f:bf:e9:1c:60:9b:
c7:7a:20:9b:20:d7:6c:9e:a5:49:4d:9f:5d:67:89:
d2:82:39:64:d8:a2:c6:f4:4d:64:5c:28:12:32:4c:
1a:a2:57:75:ef:65:e8:74:c1:e1:d4:09:98:6a:7b:
c9:1a:da:54:76:bf:86:75:03:bc:59:c5:51:46:a4:
a6:95:ed:77:f2:ae:f8:b3:77:63:3c:2d:fe:81:a5:
cc:6d:32:e7:9c:43:95:06:1e:7e:d7:4b:f2:e7:5c:
d5:9a:d3:9f:09:24:7d:58:c3:e7:23:7d:5c:37:6c:
b4:e1:26:3f:42:62:6f:ec:6b:35:6b:c8:45:c7:8c:
0f:d2:7d:cb:2f:a1:91:8c:36:39:bc:ed:55:a1:0f:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:50:4E:BE:29:2B:A7:6C:10:40:CF:D1:3C:C4:37:CC:74:5E:3B
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/2X1QTr4pK6dsEEDP0TzEN8x0Xjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.213.86.0/24
77.221.130.0/24
89.253.192.0/18
109.120.162.0/24
109.120.167.0/24
109.120.172.0/24
193.32.198.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:30:d6:af:70:89:80:8e:5a:e3:81:78:cc:d9:0e:bb:f8:6a:
f4:0c:08:4c:71:5d:c8:cc:62:c3:8d:e7:db:c9:9a:1f:d7:52:
ec:3c:07:3e:13:3d:27:ab:8e:31:ab:b9:a6:3f:6a:94:e0:27:
26:e2:0f:e2:90:28:38:03:fe:73:b5:2a:7d:61:de:04:59:bc:
42:bd:fa:ec:cf:10:23:7f:56:8c:24:b3:22:16:b3:9d:24:5a:
1b:42:44:25:56:f0:81:6b:45:34:71:47:b6:26:d8:05:85:a8:
2b:e9:73:53:56:f5:e1:b1:20:90:15:70:6f:fe:16:c0:71:4f:
8b:34:81:7f:a7:d7:28:e5:72:40:3f:7f:9f:c9:40:0d:29:fd:
2a:f9:9d:e6:12:4e:a1:23:1a:70:2a:bb:76:ef:86:33:ea:9a:
eb:16:17:26:03:b2:8e:07:9a:26:12:70:dc:2e:06:c8:a1:c5:
1a:73:e2:a8:ad:bc:cb:d0:0e:77:5d:3a:55:28:10:7a:29:c1:
90:8c:b2:d8:d1:39:5c:16:1c:77:57:dc:2c:de:da:a3:68:58:
51:b5:6a:7f:2d:bf:9b:e2:6e:52:a2:d7:3d:1f:f7:7c:c3:95:
57:39:c9:58:2d:e8:f6:96:f5:01:99:59:9f:3a:ee:fc:ee:8c:
91:a4:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:41 2025 by rpki-client